News for hackers. Stuff that matters.

A comment on Youth expelled from Montreal college after finding security flaw. Parent comment

Re:Youth expelled from Montreal college after finding securi... by jrockway on Monday January 21, 2013 @01:54AM (#5090307)
I got a B. The homework was to find and write an exploit for 10 security holes in deployed software, but I only found 2. (3 including the one above, which I must have found the week or so after exams. The holes I found were in nasm and in some amateur open-source smtpd.)

FWIW, the exams are quite thought-provoking nearly 10 years later, here's a link to them: http://cr.yp.to/2004-494.html

[ Parent | on HN ]
Re:Youth expelled from Montreal college after finding securi... by amenonsen on Monday January 21, 2013 @05:39AM (#5090851)
What did you think of the course textbook ("Exploiting Software", Hoglund & McGraw)? Is there a more modern alternative that you (or anyone) can recommend?
[ Parent | on HN ]
Re:Youth expelled from Montreal college after finding securi... by tptacek on Monday January 21, 2013 @02:01PM (#5093049)
_The Art Of Software Security Assessment_ is the current canonical text.

Here's a reading list; I'd add Zalewsky's _Tangled Web_ to it, but change little else: http://amzn.to/cthr46

[ Parent | on HN ]
Re:Youth expelled from Montreal college after finding securi... by jrockway on Monday January 21, 2013 @06:33AM (#5090998)
The textbook covers subject matter that won't become outdated: reverse engineering, how to craft malicious input, etc.
[ Parent | on HN ]
Re:Youth expelled from Montreal college after finding securi... by tptacek on Monday January 21, 2013 @11:09AM (#5092033)
Didn't he famously fail the whole class one of the times he gave it?
[ Parent | on HN ]
Re:Youth expelled from Montreal college after finding securi... by jrockway on Monday January 21, 2013 @07:07PM (#5094603)
I don't think so, as he's only taught the class once and I didn't fail it:

http://cr.yp.to/courses.html

[ Parent | on HN ]
Re:Youth expelled from Montreal college after finding securi... by tptacek on Monday January 21, 2013 @10:55PM (#5095419)
There was a Slashdot story about it.

I remember reading the course syllabus online and being jealous despite already having worked in professional vulnerability research for a few years. You're lucky to have been at the class! Was he a good lecturer?

[ Parent | on HN ]
Re:Youth expelled from Montreal college after finding securi... by Tichy on Monday January 21, 2013 @05:35AM (#5090829)
Sounds like a very cool course.
[ Parent | on HN ]